Microsoft 365 apps on Windows 10 will stop receiving feature updates as of October 14, 2025, the same day the operating system itself hits end of support. But Word, Excel, Outlook, PowerPoint, Project, and Visio will continue getting security patches until October 2028, the company confirmed in a support document published this week. The move gives organizations and individuals three extra years to keep using the productivity suite on the aging OS—provided they’re willing to forgo new capabilities and live with an unsupported OS unless they pay for extended security updates.

The New Support Timeline

The change moves Microsoft 365 Apps out of what Microsoft calls ‘normal support’ on Windows 10. Under the new policy, only security fixes will be delivered through monthly updates, the same cadence used for the perpetual Office 2016 and Office 2019 versions when they reached end of mainstream support. Feature updates, user interface enhancements, and cloud-connected AI tools that the company rolls out to Windows 11 users won’t appear on Windows 10.

The cutoff date—October 14, 2025—is locked in. After that, the installer for Microsoft 365 Apps will block new installations on Windows 10 unless the PC has paid Extended Security Updates (ESU) for the OS. Existing installations will continue to function, and they’ll receive security updates as long as you keep your subscription active, but they’ll eventually fall so far behind the feature set on Windows 11 that Microsoft is betting users will feel the pressure to upgrade.

For consumers running Windows 10 Home or Pro, the situation is murkier. Those editions don’t qualify for ESU, meaning the OS itself will stop receiving security fixes after October 14, 2025. Running Microsoft 365 apps on an unsupported OS is technically possible, but any vulnerability in Windows could leave the whole machine exposed. The apps themselves will be patched against Office-specific threats, but that’s only half the equation.

What the Three-Year Window Really Means

Three years of security updates may sound generous, but it’s not the same as full support. Security updates in Microsoft’s language mean patches for vulnerabilities that could allow code execution, privilege escalation, or information disclosure. They don’t include non-security bug fixes, performance improvements, or compatibility enhancements.

If a new Windows 11 feature relies on a new API or OS capability—like the NPU‑enhanced Copilot experiences, Windows Ink improvements, or live captions—it will simply not be available on Windows 10. The Microsoft 365 apps on that OS will be frozen in time, providing a stable but stale experience. For businesses that need to standardize on a single version for compliance or training purposes, that might actually be a benefit. But for knowledge workers who rely on the latest collaboration tools, it’s a dead end.

Microsoft has already started tying new Microsoft 365 features to Windows 11. In March 2025, the company began rolling out AI-powered summaries in Word and PowerPoint that leverage the local NPU on Copilot+ PCs, which are exclusively Windows 11 devices. Outlook’s new agenda view and Teams’ mesh avatars are Windows 11-only. The pattern is clear: Microsoft 365 innovation lives on Windows 11.

Windows 10’s End of Support: The Bigger Problem

The Microsoft 365 app updates are only one piece of a complex puzzle. Windows 10 itself reached end of support on October 14, 2025. That means no more monthly security updates for the OS unless you’re an organization that purchased Extended Security Updates through a volume licensing program. For consumers and small businesses, the clock ran out.

Microsoft has been unusually direct about the risks. Without OS patches, a single unpatched vulnerability can expose the machine to ransomware, credential theft, or botnet conscription. The company’s own Security Intelligence Report shows that unpatched operating systems are targeted within days of a vulnerability disclosure. Running secure Microsoft 365 apps on top of a vulnerable OS is like installing a high-security lock on a cardboard door.

For those who can’t upgrade—typically because their hardware doesn’t meet Windows 11’s TPM 2.0 and processor requirements—the options are grim. They can continue using Windows 10 without support and hope for the best. They can switch to an alternative operating system like Linux and use the web versions of Microsoft 365. Or they can buy a new PC. A fourth, unsupported route is bypassing the hardware checks to install Windows 11, but Microsoft strongly advises against it and won’t guarantee updates or support.

The Enterprise Escape Hatch: Extended Security Updates

Larger organizations have a formal path. Microsoft’s Extended Security Updates (ESU) program for Windows 10 allows businesses to purchase up to three years of additional OS security patches. The first year is priced per device, with costs doubling each subsequent year—a classic Microsoft incentive to move on. Once enrolled, those machines will also be able to continue installing and running Microsoft 365 Apps with full access to the security updates for those applications.

This alignment between Windows 10 ESU and Microsoft 365 Apps security support is no coincidence. It gives IT departments a unified timeline: purchase ESU for three years, and both the OS and the Office apps stay patched. During that window, they can replace old hardware, test Windows 11 compatibility, and roll out the upgrade without a panic.

The ESU program also covers Windows 10 IoT Enterprise and Windows 10 Enterprise LTSC editions, but those have different lifecycles. Most business users on standard Enterprise or Pro editions will need to budget for the per-device cost, which can run into tens or even hundreds of thousands of dollars for large fleets.

Community Reaction and Unanswered Questions

On Windows forums, reactions have been mixed. Long-time Windows 10 users who consider the OS “mature and stable” express frustration at being forced into an upgrade they see as unnecessary. In one representative thread on WindowsForum, a user wrote: “My OptiPlex 7050 runs Windows 10 without a hiccup. I don’t want Windows 11’s taskbar or the Copilot button. Now you’re telling me I can’t even get new Office features? It’s a shakedown.”

Others point out the environmental and financial cost of replacing perfectly capable hardware simply because of a security chip requirement. “This machine has a seventh-generation Core i7, 32 GB of RAM, and an SSD,” the post continued. “It will handle any Office workload for the next five years. But it doesn’t have TPM 2.0, so it’s e-waste now.”

Small business owners expressed confusion over the split between OS and app support. “I pay for Microsoft 365 Business Standard. I assumed that meant Microsoft would keep my apps secure. Now I find out they will, but the OS underneath won’t be, and I have to pay extra for ESU? That doesn’t feel like a subscription, it feels like a trap,” wrote a family-run IT consultant on the same thread.

Microsoft’s silence on a consumer ESU program has only fueled the anger. When asked, a company spokesperson reiterated that the “best and safest experience is on Windows 11” and pointed to trade-in programs and the “75 million monthly active Windows 11 devices” as proof of adoption. The hard reality: individuals running Home or Pro are expected to buy a new PC.

How This Compares with Past Lifecycles

Microsoft has used similar tactics before. When Windows 7 support ended in January 2020, Office 365 ProPlus (the subscription version at the time) continued receiving security updates for three more years, ending in January 2023. During that period, organizations on Windows 7 ESU could stay patched, and many did. The same pattern played out with Windows 8.1 and SharePoint Server.

What’s different now is the aggressive feature differentiation. In the Windows 7 era, Office 365 was largely a cloud-synced version of the desktop apps we’d used for years. Today, Microsoft 365 is a constantly mutating platform with AI, real-time collaboration, and cloud-powered experiences. The gulf between “security updates” and “feature updates” is wider than ever, and it’s growing by the month.

The company is also more explicit in its documentation about the end date. A support article updated on October 1, 2025, states: “If you choose to stay on a Windows 10 device after October 14, 2025, your Microsoft 365 Apps will continue to work, but you will not receive any new features, and you may encounter performance and reliability issues over time due to the lack of integration testing on an unsupported OS.” That language is blunter than the warmer, fuzzier notices from previous lifecycle transitions.

What You Can Do Now

The deadline may seem far off, but the sensible time to act is today. Here’s a practical checklist for anyone running Microsoft 365 on Windows 10.

Check your hardware eligibility for Windows 11. Microsoft’s PC Health Check app will tell you if your current device meets the requirements, including TPM 2.0 and processor generation. If it does, the upgrade to Windows 11 is free and can be done through Windows Update. Back up your data first.

If your hardware doesn’t qualify, start planning a replacement. Many business-class PCs sold after 2019 already meet the requirements, and refurbished units are widely available. If a new PC isn’t in the budget immediately, consider using Microsoft 365 on the web via a browser; the online versions of Word, Excel, and others are surprisingly capable and don’t depend on the underlying OS.

For businesses, contact your Microsoft reseller about ESU. If you have devices that can’t be upgraded yet, ESU is the official bridge. It requires volume licensing, and you must enroll before the cutoff. Detailed pricing is available through the Microsoft Volume Licensing Service Center.

Audit your line-of-business applications. Many organizations have custom software that may not run on Windows 11. Work with your vendors now to get updated versions or find alternatives. Don’t wait until the last month.

Consider your cloud options. Windows 365 Cloud PC and Azure Virtual Desktop can stream a fully supported Windows 11 desktop to any device, including your aging Windows 10 box. Those services are subscription-based but can buy time and defer hardware costs.

The Bottom Line

Microsoft 365 Apps on Windows 10 are entering a twilight period. They won’t suddenly stop working on October 14, 2025, and they’ll keep getting security patches until 2028, giving you a long runway. But the writing is on the wall. Each new feature announcement for Microsoft 365 will come with a footnote: “Requires Windows 11.” Over time, using Windows 10 will feel less like a choice and more like an act of digital nostalgia.

For individuals, the clock is ticking in a different way. Without ESU, the OS beneath those patched apps will become a sieve. The smart money is on upgrading to Windows 11, even if it requires new hardware. For businesses, the three-year ESU window is a grace period, not a permanent solution. The goal should be a full migration well before October 2028, not a last-minute scramble.

Microsoft is playing a long game here. It wants a unified platform for AI, security, and modern management—and that platform is Windows 11. By locking Microsoft 365’s future to that OS, it’s applying steady pressure to the 60% of Windows users still on Windows 10 as of mid-2025. Whether that pressure is seen as necessary modernization or forced obsolescence depends on which side of the hardware compatibility line you stand.